Rubrik Q4 FY2026 Earnings Call - Record Net New ARR, Free Cash Flow; Agent Cloud Goes GA as Identity Surges
Summary
Rubrik closed FY2026 with a clean quarter and a loud message. The company posted record net new subscription ARR of $115 million and subscription ARR of $1.46 billion, while converting scale into profits and cash, generating $238 million of free cash flow for the year. Identity protection is the fastest-growing product in company history, and Rubrik formally moved Agent Cloud from beta to general availability, positioning itself as a control layer for agentic AI.
The numbers underpin a clear narrative: accelerated growth, rising margins, and an aggressive push into AI operations and sovereign cloud. That combination looks compelling, but the new businesses are early. Agent Cloud traction is promising but nascent, sovereign cloud TAM is undefined, and some FY2027 upside remains tied to successful commercialization of these new product S-curves rather than the established data protection base.
Key Takeaways
- Record net new subscription ARR of $115 million in Q4, driving subscription ARR to $1.46 billion, up 34% year over year.
- Subscription revenue was $365 million in Q4, up 50% year over year; total revenue was $378 million, up 46%.
- Subscription net retention rate remained above 120% in Q4, with cross-sell and product expansion contributing meaningfully to NRR.
- Cloud ARR reached $1.29 billion, up 48% year over year, and now represents 88% of subscription ARR, signaling the tail end of a cloud transition.
- Subscription ARR contribution margin improved dramatically to 12% LTM, a roughly 950 basis point year-over-year gain, driven by scale and cost efficiencies (730 bps normalized for prior-period payroll tax items).
- Free cash flow was $70 million in Q4 and $238 million for fiscal 2026, more than 10x the prior year, with cash, restricted cash and marketable securities of $1.7 billion on the balance sheet.
- Material rights from cloud transformation contributed roughly $18 million to Q4 revenue; company expects ~$4 million in Q1 and ~$10 million for fiscal 2027, which affects GAAP revenue comparability.
- Rubrik Agent Cloud moved from beta to general availability, powered by the Predibase acquisition; early POCs with Fortune 500s and AI startups focus first on agent discovery and monitoring, then real-time guardrails, and later rewind/remediation.
- Identity business is exploding: Rubrik crossed 900 identity customers, added Okta recovery support, and reported >50% of M365 bookings this quarter were attached to identity solutions.
- Large-account traction: customers with >=$100k in subscription ARR rose 25% to 2,805 and now represent 87% of subscription ARR; Rubrik added a record 32 customers with >=$1M ARR (over 50% growth in that cohort).
- Competitive positioning appears strong, with win rates against peers cited north of 90% in Q4; Rubrik frames itself as a platform and a system of record of last resort for cyber resilience.
- FY2027 guidance calls for subscription ARR of $1.829B-$1.839B (25%-26% growth) and total revenue $1.597B-$1.607B, with subscription ARR contribution margin targeted near 13% and free cash flow of $265M-$275M.
- Management will continue investing in R&D and go-to-market to scale identity and AI offerings, while keeping an eye on hardware supply dynamics; so far memory pricing and lead times have not materially affected results.
- Sovereign cloud is a strategic initiative under development, but management says TAM and net-new opportunity remain unclear and are evolving with geopolitics and local AI infrastructure needs.
- Leadership transition in go-to-market to Jesse Greene was described as planned and smooth; management sees multiple landing paths into customers which should reduce single-thread GTM risk.
Full Transcript
Brad Zelnick, Analyst, Deutsche Bank0: Good afternoon, ladies and gentlemen, and welcome to the Rubrik fourth quarter and fiscal year 2026 results conference call. At this time, all lines are in listen-only mode. Following the presentation, we will conduct a question and answer session. If at any time during this call you require immediate assistance, please press star zero for the operator. This call is being recorded on Thursday, March twelfth, 2026. I would now like to turn the conference over to Melissa Franchi, Vice President of Investor Relations. Please go ahead.
Melissa Franchi, Vice President of Investor Relations, Rubrik: Hello, everyone. Welcome to Rubrik’s fourth quarter and fiscal year 2026 financial results conference call. On the call with me today are Bipul Sinha, CEO, Chairman, and Co-founder of Rubrik, and Kiran Choudary, Chief Financial Officer. Our earnings press release was issued today after the market closed and may be downloaded from the investor relations page at www.ir.rubrik.com. Also on this page, you’ll be able to find a slide deck with financial highlights that, along with our earnings release, includes a reconciliation of GAAP to non-GAAP financial results. These measures should not be considered in isolation from or as a substitute for financial information prepared in accordance with GAAP.
During this call, we will make forward-looking statements, including statements regarding our financial outlook for the first quarter and full fiscal year 2027, our expectations regarding market trends, our market position, opportunities including with respect to generative AI, growth strategy, product initiatives and expectations regarding those initiatives, and our go-to-market motions. These statements are only predictions that are based on what we believe today, and actual results may differ materially. These forward-looking statements are subject to risks and other factors that could affect our performance and financial results, which we discuss in detail with our filings with SEC. Rubrik assumes no obligation to update any forward-looking statements we make on today’s call. With that, I’ll hand the call over to Bipul.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Thank you, Melissa, and thank you all for joining us today. Let me start by saying we ended the year with a spectacular Q4 that significantly exceeded our expectations. We accelerated net new subscription ARR growth to a record $115 million. For the full fiscal year, we generated tremendous free cash flow of about $238 million, which is more than 10 times the free cash flow for the prior fiscal year. This is a clear indication that we are indeed laying the foundation of a long-term, highly profitable growth business. With that, we have once again exceeded all guided metrics across top line and profitability. Here are five key numbers. First, subscription ARR reached $1.46 billion, growing 34% year-over-year. Second, our subscription revenue was $365 million, growing 50% year-over-year.
Third, our subscription NRR remained strong once again above 120%. Fourth, customers with 100K or more in subscription ARR reached 2,805, growing 25% year-over-year. Finally, on profitability, we once again made material improvement in subscription ARR contribution margin, up over 950 basis points year-over-year. We generated $70 million in free cash flow this quarter. Accelerating growth while improving margins and growing free cash flow, as I stated before, at our scale is not only very impressive but a rare combination. Now let me explain why and how we got here. Enterprise AI and agentic work disruptions are creating significant opportunities for us, and we are leaning into it. Rubrik is a multi-product company built on a unique and highly differentiated platform that solves the most consequential problems across data, identity, and AI.
We continue to deliver phenomenal results quarter after quarter because we are comprehensively winning against the competition and enabling enterprise AI acceleration. In fact, our competitive win rates have crossed 90% in Q4 as we continue to disrupt the data and identity protection market with our transformative products that deliver comprehensive cyber resilience. This is why we continue to accelerate our growth while our competition has stalled. At the same time, Rubrik Agent Cloud aims to deliver dynamic real-time AI agent controls to accelerate enterprise AI transformation. I will talk about Rubrik Agent Cloud in a few minutes, but first, let me talk about why our products are transformative. We have built a single platform that understands data, identity, and application context. On top of this platform, we deliver two solution suites. Rubrik Security Cloud for cyber resilience and Rubrik Agent Cloud for accelerated AI transformation.
Let me start with Rubrik Security Cloud. In our platform, we have the unique ability to bring together time series data and metadata across complex enterprise environments that span on-premises, sovereign, cloud, SaaS, and identity providers. We have built a single policy engine to deliver uniform policy-driven automation for complete cyber resilience, including protection, security, and cyber recovery. On top of this, we have built a proprietary preemptive recovery engine that pre-calculates the clean points of recovery across data and identity. These make up Rubrik’s true moat. This is how we deliver record fast recoveries when our customers are compromised by ransomware and identity-based attacks. Our software architecture is hardware and platform optimized to deliver cyber resilience to thousands of our enterprise customers. This is why we are winning the cyber resilience market.
Rubrik is a true platform company, and we provide multiple independent paths for our customers to get started. Whether a customer buys a single product or the whole Rubrik Security Cloud suite, they get the same platform. In fact, our customers realize more value from our platform as they adopt more and more of our products, which is a testament of Rubrik’s true platform strategy. We were the first to recognize the need for cyber resilience and its subsequent evolution in enterprises, which is what underpins our success. The trends are clear. Enterprise agentic AI transformation promises tremendous productivity gains. However, these agents also assume your identity and act on trusted data. If agents hallucinate or are compromised by bad actors, they can do ten times more damage in one-tenth of the time. That exposes companies to unprecedented risk.
Moreover, cyber attackers are actively deploying AI to breach businesses and governments around the world. In essence, AI has made the world more dangerous. The best metaphor we can provide is protecting your home. You can close the windows and put on the locks, but ultimately, you need a bunker underneath your house to survive the doomsday, so your cloud and AI transformation journey continues uninterrupted. Rubrik Security Cloud is that bunker for enterprises. When ransomware inevitably hits, an LLM or AI code will not recover your business. Rubrik will. We can do this because we have years of cyber resilience and enterprise customer experience built into our platform. Rubrik not only understands the complexity of enterprise data and identities but also delivers the minimum viable services that companies need to run their digital businesses twenty-four seven.
We help enterprises rapidly recover their services by quickly pinpointing the cleaner state of data and identities, all the while isolating the threats to prevent malware reinfection. The Rubrik bunker delivers complete cyber resilience across on-premises, sovereign, cloud, and SaaS applications. Rubrik Security Cloud is powered by a unique and proprietary system of record of last resort of data and identity. This is our secret sauce. Let me provide two specific customer examples of legacy replacement in very large enterprises. First, Rubrik secured a major win with a Fortune 500 global hospitality company this quarter. The company chose Rubrik to enhance their cyber resilience and recovery speed from ransomware attacks, deploying our single platform across their hybrid and multi-cloud environments. This company displaced a deeply entrenched legacy provider and a cloud native backup solution. We also outcompeted several next-generation vendors.
Furthermore, the move is projected to deliver multimillion-dollar savings by eliminating cloud native backup costs. Second, a leading European financial services firm selected Rubrik as their strategic cyber resilience partner to meet stringent DORA and ECB guidelines, replacing their multi-decade legacy incumbent. Rubrik was selected for our single unified platform, providing data protection and resilience across their entire environment, including enterprise, cloud, and SaaS applications, as well as their mission-critical identity system. Speaking of SaaS applications, our SaaS protection had a particularly strong Q4. As customers look to Rubrik for end-to-end risk and remediation across their mission-critical applications, including M365 and identity services. In fact, over 50% of Rubrik M365 bookings this quarter were attached to our identity solution. Let me give you one representative customer example. A major global logistics provider expanded Rubrik to protect M365, Active Directory, and Entra ID, critical systems that run their mission-critical business operations.
Rubrik displaced an incumbent new gen competitor because our superior identity coverage and faster recovery time across these tier one applications, reducing considerable business risk in case of a cyber attack or operational disruption. Next, let’s talk about our identity business. Our identity line of business continues to be highly successful in garnering budget from CISOs, extending Rubrik beyond our traditional CIO and CTO buying personas. We have been rapidly disrupting the identity protection market with our identity recovery and resilience products. This quarter, we announced protection for Okta Identity, making Rubrik the only identity recovery platform to span Okta, Active Directory, and Entra ID. In just one quarter of selling, we have already seen notable deal activity for Okta recovery, and we are excited about what’s ahead. Let me give you two specific examples of identity customer wins.
A Fortune 500 US financial services firm added Okta Recovery in a significant expansion that also included Identity Resilience Suite, as well as protection for unstructured data and cloud data. This customer chose Rubrik to meet a board-mandated less than 48-hour recovery time objective, displacing a cloud-native backup solution and a legacy protection vendor. Second, a major US healthcare provider also expanded their Rubrik partnership this quarter, adopting Identity Resilience and unstructured data protection for over 10 PB of data. This strategic move is expected to cut Active Directory and Entra ID cyber recovery time from over 30 days to under 4 hours, substantially reducing potential downtime losses estimated at $tens of millions in revenue daily. Now, let’s talk about Rubrik Agent Cloud, which accelerates AI adoption with agent guardrail controls. Rubrik’s mission is to secure and accelerate the world’s AI transformation.
I have already discussed the security and cyber resilience aspects of our business. Let’s focus on how Rubrik accelerates AI transformation. Agentic AI is now a business imperative. While agents promise 100 times more productivity, they also introduce 100 times more risks. Since agents autonomously execute business processes, the cascading impact of agent hallucinations, as well as cyber compromise, will result in catastrophic damage for enterprises. While AI gives you a better, faster car, you need an intelligent, autonomous driving system for control to steer, change lanes, and brake safely. We believe enterprises need a comprehensive AI operations platform that can dynamically monitor, control, and remediate agentic actions. You need to have visibility into what agents, sanctioned or unsanctioned, exist in your environment and what they are doing. You also need real-time guardrails to dynamically authorize agentic interactions that comply with your company’s policies and industry regulations.
If agents get compromised or hallucinate, then you need a rewind button to undo destructive actions. Rubrik Agent Cloud is this comprehensive AI operations platform. This is the intelligent autonomous driving system that we provide so our customers can safely drive fast with AI agents. Our Predibase acquisition, which developed LLM fine-tuning and inference serving platform, provides the AI firepower required to dynamically govern agentic interactions. By leveraging AI to control agentic work, agents can’t leak sensitive data, can’t say wrong things, and can’t take wrong actions. AI controlling AI agents is key. After all, you can’t bring a knife to a gunfight. Predibase is now integrated into the Rubrik platform, which uniquely understands the data, identity, and application layers to deliver the first of its kind enterprise control layer for managing and guardrailing AI agents.
Last quarter, we shared that Rubrik Agent Cloud was in beta. Just a few weeks ago, we made Rubrik Agent Cloud generally available, and we have a number of POCs ongoing across early AI adopters as well as Fortune 500 companies. While we are still in the early innings of a multi-year effort to scale our Rubrik Agent Cloud Suite, we believe that we are building the most consequential security and AI operations company for the AI era. We look forward to sharing more details about our traction with Rubrik Agent Cloud in the coming quarters and years. I couldn’t be more happy with this quarter and annual results, and I’m excited about what’s ahead. We are squarely focused on advancing our mission to secure and accelerate the world’s AI transformation. In closing, I will leave you with three key takeaways.
First, Rubrik is winning the cyber resilience market across data and identity. Second, we have accelerated our business growth while the competition has stalled. Third, we are defining the enterprise AI market with our unique and differentiated agent control and guardrail solutions. To our shareholders, thank you for your trust. We are just getting started. Once again, to all Rubrikans around the world, I cannot be more appreciative of all the hard work and results we are creating. With that, I’m pleased to pass it over to our Chief Financial Officer, Kiran Choudary.
Kiran Choudary, Chief Financial Officer, Rubrik: Thank you, Bipul. Good afternoon, everyone, and thank you for joining us today. I’m pleased to note that we concluded this year with an exceptionally strong performance. This included record net new subscription ARR with accelerated growth and continued improvement in subscription contribution margins. This robust financial outcome demonstrates our focused execution and solidifies our leading position in the mission-critical cyber resilience market, a market that is benefiting from the ramping AI transformation. I’ll start by briefly recapping our fourth quarter fiscal 2026 financial results and key operating metrics. Then I’ll provide guidance for the first quarter and full year fiscal 2027. All comparisons, unless otherwise noted, are on a year-over-year basis. We are very pleased to have ended Q4 with subscription ARR of $1.46 billion, growing 34%.
We added over $115 million in net new subscription ARR, another record amount for Rubrik. Continued adoption of Rubrik Security Cloud resulted in $1.29 billion of cloud ARR, up 48%. We’re at the tail end of our cloud transition, with cloud ARR now representing 88% of subscription ARR as of Q4. We continue to see strong subscription net retention rate, which remained over 120% in the fourth quarter. We are very proud of the high customer retention and expansion dynamics of our business. Expansion occurs through data growth in existing applications, securing more applications or identities, or adding more security products. In fact, adoption of additional security products contributed over 45% of our subscription net retention rate in the quarter, up from 34% in the year ago period.
In the fourth quarter, we saw significant growth in our largest accounts, with the number of customers contributing $100,000 or more in subscription ARR rising 25% to 2,805. These large customers now represent 87% of our subscription ARR, an increase from 84% a year ago. Furthermore, we added a record 32 customers with subscription ARR of $1 million or more, driving over 50% growth in our over $1 million subscription base. For our fourth quarter, subscription revenue was $365 million, up 50%. Total revenue was $378 million, up 46%. Revenue in Q4 primarily benefited from our strong ARR growth. However, we again had tailwinds from our cloud transformation, resulting in higher non-recurring revenue, which is accounted for as material rights.
Material rights contributed approximately $18 million to revenue this quarter, modestly higher than our expectation. Revenue growth normalized for material rights was approximately 43% in the quarter. Turning to the geographic mix of revenue from the Americas grew 45% to $268 million. Revenue from outside the Americas grew 51% to $109 million. Before turning to gross margins, expenses, and profitability, I would like to note that I will be discussing results on a non-GAAP basis going forward. Our non-GAAP gross margin was 84% in the fourth quarter compared to 80% in the year ago period. Our gross margin benefited from the revenue outperformance, including higher non-recurring revenue and greater efficiency in hosting costs.
As a reminder, we look at subscription ARR contribution margin as a key measure of operating leverage and believe the improvement in our subscription ARR contribution margin demonstrates our ability to drive operating leverage and profitability at scale. Subscription ARR contribution margin was 12% in the last twelve months, ended January 31, compared to 2% in the year ago period, an improvement of approximately 950 basis points. When normalizing for the $23 million in employer payroll taxes associated with the IPO in the prior period, the improvement was approximately 730 basis points. The improvement in subscription ARR contribution margin was driven by higher sales, the benefits of scale, and improving efficiencies and management of costs across the business. Free cash flow was $70 million compared to $75 million in the fourth quarter of fiscal 2025.
Free cash flow for fiscal 2026 was $238 million compared to $22 million for fiscal 2025. This increase was driven by higher sales, improved operating leverage, and optimizing our capital structure. Turning to our balance sheet, we ended the fourth quarter in a strong cash position with $1.7 billion in cash equivalents, restricted cash and marketable securities, and $1.1 billion in convertible debt. Let me now provide some context on our guidance. We are confident in our outlook, fueled by the robust cyber resilience market, our differentiated technology platform, and scaling of emerging products such as identity security. This momentum, coupled with our consistent and effective execution, positions us to achieve robust growth in subscription ARR. We plan to continue making operational investments across two key areas.
First, we’ll continue to invest in R&D to accelerate innovation in the large but developing markets of data security and AI. Second, we’ll invest in our go-to-market, specifically targeting regions and verticals that offer the most attractive ROI. These go-to-market investments will also focus on scaling our newer innovations, such as Identity Resilience Platform and Rubrik Agent Cloud. Now turning to guidance for the first quarter and full year fiscal 2027. In Q1, we expect revenue of $365 million-$367 million, up approximately 31%-32%, or approximately 36%-37% when normalized for material rights. We expect material rights related to our cloud transformation to contribute approximately $4 million to revenue in Q1. We expect non-GAAP subscription ARR contribution margins of 10%-11%.
We expect non-GAAP earnings per share of -$0.04 to -$0.02 based on approximately 204 million weighted average shares outstanding. For the full year fiscal 2027, we expect subscription ARR in the range of $1,829 million-$1,839 million, reflecting a year-over-year growth rate of approximately 25%-26%. We expect total revenue for the full year 2027 in the range of $1,597 million-$1,607 million, up approximately 27%-28% when normalized for material rights. We expect material rights related to our cloud transformation to contribute approximately $10 million to revenue in fiscal year 2027.
As we have always communicated, subscription ARR is the primary top-line metric to evaluate our business performance as it is not impacted by accounting dynamics related to our cloud transformation. In terms of profitability, we’ll continue to stay focused on taking advantage of the market opportunity in cybersecurity and AI while balancing growth with improved efficiency. Based on our current investment plans, we expect non-GAAP subscription ARR contribution margins of approximately 13% for the full year fiscal 2027. We expect non-GAAP EPS of $0.07-$0.27 based on approximately 232 million weighted average shares outstanding for the full year. We expect free cash flow of $265 million-$275 million. As always, we have included some additional modeling notes in our investor presentation.
In closing, we are pleased with our strong performance in fiscal 2026 while exceeding our financial targets across the board. Looking ahead, we’re excited about the opportunities awaiting us in fiscal 2027 and beyond. We plan to share more about our ambitious vision throughout the year, including at our Forward user conference in Las Vegas. Please note that our inaugural Investor Day will be held on June 10 during the conference. More details on that event will follow. With that, we’d like to open up the call for any questions.
Brad Zelnick, Analyst, Deutsche Bank0: Thank you, ladies and gentlemen. We will now begin the question and answer session. Should you have a question, please press the star key followed by 1 on your touch-tone phone. You will hear a prompt that your hand has been raised. Should you wish to decline from the polling process, please press the star key followed by 2. In the interest of time, we ask you please limit yourselves to one question each. Thank you. One moment, please, while we assemble the queue. Your first question comes from Matthew Martino of Goldman Sachs. Please go ahead.
Matthew Martino, Analyst, Goldman Sachs: Hey, good afternoon. Thank you guys for letting me ask a question here. Bipul, you mentioned ongoing Agent Cloud POCs with the Fortune 500 and AI startups. Can you help us understand what those two customer sets are each trying to solve for, and whether the early pull is showing up more around the monitoring and guardrail side or around remediate and govern? Thank you.
Kiran Choudary, Chief Financial Officer, Rubrik: Thanks, Matt. As you would anticipate, customers first are trying to understand how many agents do they have in the system, both sanctioned ones as well as shadow IT unsanctioned ones.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: First understanding of all the agents in the platform, then they want to understand what these agents are actually doing. Then once they have understanding of this kind of monitoring observability, then the second step for them is to understand how they control it. This is where the real-time dynamic guardrail that Rubrik has developed, which is a unique solution, we are actually demonstrating to our customers as how you can stop agentic interactions in real time. The rewind piece will be a day two problem, so to say. Once the customers get fully operationalized at scale with agents, then they will work on, like, agentic rewind and how do you undo the effects of unwanted actions. I think the first and the second piece is high priority right now. Thanks a lot.
Melissa Franchi, Vice President of Investor Relations, Rubrik: Thanks, Sam.
Brad Zelnick, Analyst, Deutsche Bank0: Your next question comes from Fatima Boolani of Citi. Please go ahead.
Fatima Boolani, Analyst, Citi: Good afternoon. Thank you for taking my question. Bipul, I wanted to talk to you about the sovereign cloud opportunity and the release of Rubrik Sovereign Cloud. We have in principle seen this notion of sovereignty and data sovereignty pop up in other pockets of software and other domains of cybersecurity. I wanted to get to the bottom of what has been the customer impetus in order for you to formalize and really build an opportunity and a dedicated product effort around this. You know, bringing that into kind of the numbers and how we think about the incremental opportunity, what is that incremental or new TAM that is now capturable as a result of this form factor or flavor of RSC being available? Thank you.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Thanks, Fatima. Very, very insightful question. What has really happened is, given the geopolitics of the world and how things have evolved in the last, call it 5 to 10 years, every country is concerned about containing the supply chain, containing the economic infrastructure, which is data center compute infrastructure, and actual data within their own borders. They have, like, 2 kinds of requirements. Requirement number 1 is where they want the government infrastructure to be totally sovereign constrained and in their own data center controlled by very high ring fence of security. That’s one. The second one is the public cloud infrastructure located in their country, but with additional control of what data can go out and what can come in within those infrastructure.
The two flavors of sovereign kind of infrastructure or cloud, if you can call so. AI is adding a new angle to this. In many countries, they’re also thinking about creating AI infrastructure in a way that they can rent it out to other countries. That AI infrastructure will be in the—think about like a digital embassy. That digital embassy will run the AI infrastructure plus in a sovereign way. This is a new space. It is fast emerging space. There is significant product changes, development, adaptation is required because of the additional control and on-premises data center nature of it. We are engaged with a number of customers on this. We are watching this market. TAM is still evolving. I don’t have a good sense of how big the TAM would be.
If it is a net new, it is also unclear because before the sovereign concept, the customers was consuming IT services, but in a more shared way or cloud way. It is also unclear if it is a net new. This architectural shift will require modernization, infrastructure, maybe cloud transformation. We believe that it’s an interesting opportunity for us, and we are actively working on it.
Fatima Boolani, Analyst, Citi: Thank you.
Melissa Franchi, Vice President of Investor Relations, Rubrik: Thank you, Fatima.
Brad Zelnick, Analyst, Deutsche Bank0: Your next question comes from John DiFucci of Guggenheim Securities. Please go ahead.
John DiFucci, Analyst, Guggenheim Securities: Thank you. Bipul, I have a question for you. I listened closely to your prepared remarks. Rubrik sort of redefined its core market, right? Not only with the new modern architecture that was needed because of shifts in the IT infrastructure of the world, but you also expanded it beyond its traditional boundaries, from backup and recovery to security against ransomware to what became what you guys defined as cyber resilience platform. It sounds like you’re doing it again from an identity perspective. My question, though, is on AI. It’s something I don’t like to ask about because I think it’s asked too much, and I think people talk about it too much.
Should we be thinking about AI as another technology shift that will need the IT infrastructure of the world to adjust, which will require something you’ve talked about all the time, and that’s continuous innovation to address, not simply the application of old technology, which I think is sometimes what’s happening out there. I guess, in other words, is there more to come from Rubrik? On this topic and even others from a technology perspective that have similar DNA to adjust to a changing world. I’m sorry, so long-winded question.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: No, that’s a good question, John. Thank you so much. Rubrik is not a traditional company. Rubrik is a living and breathing entity that has no finish line. We are always thinking about how do we help our customers as they adopt newer technology, they go through their own platform transition, and how do we be like 2 miles ahead of them, not 200 miles ahead of them, but positively surprise them with newer and newer solutions. Our original vision was that natural disaster and human error doesn’t happen every day, but cyber disaster is the biggest problem in our industry, and we build Rubrik to solve for cyber disaster in terms of cyber recovery and cyber resilience. We created that market, we are dominating that market.
We saw that identity-based attacks had become a real problem for our customers. If you look at the recent attacks with Breakstorm and Scattered Spider, they are attacking identity-based systems. We built one of the most comprehensive identity recovery and identity resilience set of products. I’m very happy to report that in Q4, we crossed 900 customers just on identity. In just 3-4 quarters of selling, we have now crossed 900 customers. In Q3, we had reported that we had crossed 400 customers. Now we have crossed 900 customers. It is the fastest-growing product in the history of our company. Identity we built 2 years ago. We are now building a new S-curve in AI because our customers want to adopt AI.
They are concerned about the risk of AI because if the agents get compromised, then somebody can be controlling their business sitting in North Korea, and they don’t want that. They want agentic guardrails, and that guardrails to be in real-time. For example, even if you have an agent that has access to sending emails, you don’t want them to send any emails to everybody in Google and all the time. Every agentic action has to be judged and stopped or allowed based on every action. We are building a very comprehensive platform for agentic operation for management, control, and rewind of AI agents. We believe our platform’s unique ability around data, identity, and applications gives us a very natural position to really create the most important solutions to accelerate enterprise AI adoption.
I always am a huge believer in non-consensus ideas, and we are building the most important AI company that nobody is focused on. We’ll continue to build Rubrik into where our customers are going and where our markets are going, and we’ll continue to be on the leading edge.
John DiFucci, Analyst, Guggenheim Securities: That sounds exciting. We’ll be watching. One subtle thing in everything you said was, at least I take away from it, is listening closely to your customers. Thank you very much.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Thank you.
Brad Zelnick, Analyst, Deutsche Bank0: Your next question comes from Eric Heath of KeyBanc Capital Markets. Please go ahead.
Eric Heath, Analyst, KeyBanc Capital Markets: Hey, thanks for taking the question and nice set of results here and guidance as well. Kind of taking a different direction in the question here and obviously broader outside of Rubrik and software, there’s some concerns on memory pricing. Bipul, Kiran, I wanted to get some of your thoughts and feedback on how we should think about your indirect exposure to memory pricing. Are there any risks from higher memory pricing or longer lead times affecting customers procuring Rubrik appliances through your partners or willingness to engage in infrastructure modernization projects? Just high level, how should we think about it? Then if there’s any assumptions embedded in the guide, just curious to hear any thoughts there. Thanks.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Eric, this is Kiran. I’ll take that question. We are obviously a software company, and we are in the business of selling software to our customers, whether self-hosted or in the cloud. But all software runs on some form of hardware, which requires these components, including memory. We’re watching the situation closely, and we haven’t seen a significant impact on our business. Obviously, there’s a portion of our business where customers self-host and they procure hardware. We work with our customers where needed to ease it for them. So far, we haven’t seen any material impact on our business as reflected in the results. Now, coming to your question on guidance, I can again make some broad comments there, beyond just the assumptions related to hardware.
We’ve been very pleased with our Q4 and fiscal year 2026 results. It was a quarter of record net new ARR dollars in terms of $115 million, as well as acceleration of growth. When you look at our guidance, the subscription ARR metric, which is the key metric in which we measure success or momentum in our business, the net new ARR growth guide was higher than the start of last year. That’s really a reflection of the momentum we see in the business. I’ll also add that, you know, we talk about our company in terms of three businesses. One is the largest business, data protection and cyber resilience business, which is mission-critical, large, still growing, and we believe is largely under-penetrated. We are very well positioned competitively there.
That’s gonna be a key driver for growth when you look at this year. We talked about the identity business early on the call. Lots of momentum there. That’s our business where we sell products, more so to the CISO and lots to build there. The assumption on AI, while we are very excited, is, we’ve not assumed much when you talk about fiscal 2027. The feedback’s promising, but we’ll have to see how the year goes. We also considered the overall environment, business macro environment, as well as the hardware supply issues you mentioned. You know, we have taken into account what we see right now and don’t see a lot of impact at this very point. In terms of guidance, our approach has been similar.
We wanna put forward numbers which are based on all the inputs we have today, but want to put forward something we feel really good about in terms of delivering. As we have progressed in the public markets and now entering the third year, it is natural as in other software businesses that the results will tend to converge a little bit closer, more to guidance over time, and you’d expect to see that as well. Hopefully, that’s given you context on how we thought about guidance. Yeah, very thorough. Thanks, Kiran. Thank you, Eric.
Brad Zelnick, Analyst, Deutsche Bank0: This question comes from Brad Zelnick of Deutsche Bank. Please go ahead.
Brad Zelnick, Analyst, Deutsche Bank: Great. Thank you so much and congrats on just a blowout Q4 and a phenomenal year. Kiran, I guess my question is for you. I appreciate all the reasons why the handoff and go-to-market leadership to Jesse Greene should be seamless. How should we think about the possibility of any, you know, interruption, and to the extent you may have contemplated this in your guidance? Thanks.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Brad, thank you so much for the question. Let me give you a little bit of a sense of how we thought about it. We hired Jesse almost three years ago with this in mind that he will start as leader of Americas, and over time will be the successor for Brian. He has been a CRO in training for the last almost three years because he was running Americas in MongoDB. He came to Rubrik with this kind of clear path to be the CRO. It was a very natural and easy transition for us. Obviously, we are always paranoid about every aspect of our business and keep thinking about what are different risks, but the transition has gone very smoothly. The team is stable and in place and executing.
Again, the opportunity in front of us with respect to three lines of business, data protection, Identity Resilience, and AI, all three are very exciting. We have 6, 7 different ways to land our platform to our customers. Customers don’t have to buy our core product or first product to start with Rubrik. They can buy either just cloud, just identity, just on-prem. Our sellers see multiple different ways to succeed, and now they are selling a true portfolio of products, which actually creates opportunities for them and also stability in the team.
Brad Zelnick, Analyst, Deutsche Bank: Very helpful. Thank you.
Brad Zelnick, Analyst, Deutsche Bank0: Our next question comes from Gregg Moskowitz of Mizuho. Please go ahead.
Multiple Analysts, Analysts, Various (Todd Coupland/CIBC, Junaid Siddiqui/Truist, Keith Bachman/BMO, James Fish/Piper Sandler, Gregg Moskowitz/Mizuho, Shrenik Kothari/Baird): Great. Thank you for taking the question. Really terrific identity momentum and certainly an exciting opportunity ahead with Agent Cloud. That being said, Bipul, in a time when seemingly every investor is questioning the durability of their software portfolios, do you have any concerns about data recovery and resilience being meaningfully automated by AI over time, potentially impacting your core business value prop or wallet share with customers over the long term? It would just be helpful to get your perspective on this.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Rubrik is a very large and complex piece of software, and it is an enterprise-scale code with about 12 years of soaking time with thousands of customer feedback and customer use cases in a large enterprise environment that has been built into this. It is not something that you can write code or an LLM can solve. We are the system of record of last resort around data and identity when a large bank or large hospital face a ransomware attack. At that time, Rubrik is there to help their business come back online and get going. Moreover, as I said in my prepared remarks, Rubrik is a hardware-optimized, platform-optimized software. We have 1,000 engineers working on it on a daily basis to kinda enhance it and take customer feedback and soak in time with our product.
I don’t believe that we have any disruption risk at all from AI. The second important thing is we are also not an orchestration application software. We are a data infrastructure company. You know, system of record, data management is the most important capability you need for this AI transformation. Because if you have no data or the integrity or confidence in the data or the availability of the data, then you have no AI. Data is the foundation of AI, and Rubrik is the foundation data infrastructure software. We are not price our product based on number of employees in the company. We price our product based on the size and volume of the data. Rubrik’s importance only grows with the growth of AI and AI transformation of the enterprise. We want to accelerate that transformation. That’s why we introduced Rubrik Agent Cloud.
Rubrik’s stated mission is to secure and accelerate world’s AI transformation. Because when world goes through more AI transformation, it has more data, more software, more cyber threat, larger surface area of attack. More agents means more surface area of attack, more cyber compromise. You need more cyber resilience. You need more cyber recovery. We believe that our opportunity is only growing, and that is reflected in our results. If you look at our results, we deliver the most clean and complete results of any cybersecurity company. That is not an accident.
Multiple Analysts, Analysts, Various (Todd Coupland/CIBC, Junaid Siddiqui/Truist, Keith Bachman/BMO, James Fish/Piper Sandler, Gregg Moskowitz/Mizuho, Shrenik Kothari/Baird): That’s very helpful. Thank you.
Melissa Franchi, Vice President of Investor Relations, Rubrik: Thank you.
Multiple Analysts, Analysts, Various (Todd Coupland/CIBC, Junaid Siddiqui/Truist, Keith Bachman/BMO, James Fish/Piper Sandler, Gregg Moskowitz/Mizuho, Shrenik Kothari/Baird): Thank you, Bipul. Appreciate it.
Brad Zelnick, Analyst, Deutsche Bank0: Your next question comes from Todd Coupland of CIBC. Please go ahead.
Multiple Analysts, Analysts, Various (Todd Coupland/CIBC, Junaid Siddiqui/Truist, Keith Bachman/BMO, James Fish/Piper Sandler, Gregg Moskowitz/Mizuho, Shrenik Kothari/Baird): Yeah. Good evening, everyone. You had record net new in the quarter. As we think about the coming year, any pull forward in Q4 looks like the Q1 guide is seasonally lower by quite a bit. Could you just talk about those dynamics and whether or not you had any pull forward in Q4? Thanks a lot.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Hi, Todd. This is Kiran. I’ll take that one. We had a very strong Q4, $115 million accelerating growth. I would say it is a broad momentum quarter, both large and small deals. We have spoken about earlier. We’ll always have some deals which close earlier, close later. That’s the nature of the enterprise software business. That’s why we look at our business from a net new ARR on an annual basis, and very pleased with the 20% growth there. I won’t call out anything from Q4 impacting Q1. Just, I would remind everybody that last year Q1 was fairly unique. When you look at Q4 in the previous year versus Q1, there was a small dip. It’s a tougher compare when you look at growth rate.
From an overall scale perspective, and again, if you look at it on a full year net new ARR basis, the starting point for the guide is stronger than in terms of growth than last year.
Melissa Franchi, Vice President of Investor Relations, Rubrik: Thank you, Todd.
Brad Zelnick, Analyst, Deutsche Bank0: Your next question comes from Junaid Siddiqui from Truist. Please go ahead.
Multiple Analysts, Analysts, Various (Todd Coupland/CIBC, Junaid Siddiqui/Truist, Keith Bachman/BMO, James Fish/Piper Sandler, Gregg Moskowitz/Mizuho, Shrenik Kothari/Baird): Great. Thank you for taking my question. You know, your growth shows that you’re continuing to take market share, making significant inroads in displacing these legacy vendors as you’ve cited. You know, how much of a runway do you think is left in displacing that legacy base? Maybe if you could just touch upon the competitive environment in the quarter. Thank you.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Thank you, Junaid. We are very early in legacy replacement. This is a very large and deep market. As we are doing cyber resiliency transformation, specifically for the data center environment, we have a tremendous opportunity to continue to displace legacy vendors. Our win rate against the data protection vendors across the board is north of 90% in Q4. I’ll repeat, north of 90%. The only deal that we are losing is the fight that we are not in. We are figuring out how do we get in more fights, more routes to market, more parts of the world and continue to disrupt this market. While we are disrupting the legacy space, we are opening up markets around cloud, around M365, around identity, and with AI, this new Rubrik Agent Cloud.
Not only we have disrupted the legacy backup and recovery data protection market, but we have vastly expanded this market and completely redefined it to position this towards AI. We are leaning into that AI and agentic disruption to really create, again, as I said, the most important security and AI operations company.
Multiple Analysts, Analysts, Various (Todd Coupland/CIBC, Junaid Siddiqui/Truist, Keith Bachman/BMO, James Fish/Piper Sandler, Gregg Moskowitz/Mizuho, Shrenik Kothari/Baird): Thank you.
Brad Zelnick, Analyst, Deutsche Bank0: Your next call comes from Keith Bachman of BMO. Please go ahead.
Multiple Analysts, Analysts, Various (Todd Coupland/CIBC, Junaid Siddiqui/Truist, Keith Bachman/BMO, James Fish/Piper Sandler, Gregg Moskowitz/Mizuho, Shrenik Kothari/Baird): Hi, many thanks for taking the question. Bipul, this is also for you. I wanted to go back to the Agent Cloud. Seems like a very interesting opportunity as we look out over the horizon, but I wanted to get your perspective on a few things. A, who do you see as the competition? There’s lots of companies that you talk about the monitoring control plane, if you will, of agents, and therefore, who do you see as your competition for this particular sector? And B, how do you think about how your go-to-market may transition? For instance, at BMO, the folks who buy Rubrik’s cloud for our backup, they’re not the same people who would be buying a tool for monitoring controlling agents.
Just wondering how you think about how you might need to make, if any changes to go to market and then, see, when do you think we would be in position to talk about contribution of Agent Cloud to your results, even to any effect, any kind of metrics you may be able to provide. When do you think that’ll be? That’s it for me. Many thanks.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Thank you, Keith. Let me take the first question about this market. This agent control and governance market is a new market, and it’s still very early days of this market. As you can imagine, everybody and their mother is jumping into this market. Most of the cybersecurity observability ML observability companies are now repositioning themselves as agentic observability, agentic governance model. My belief is that the traditional cybersecurity companies or people in those cybersecurity companies will not be suitable for this market because traditional cybersecurity is all about rule-based platform. They are not in the real-time control of action. This market is about dynamic control, and you need to bring an AI to control agentic action. An AI requires model engineers.
Most of the cybersecurity companies, probably none of the cybersecurity companies or these startups have any model engineering. We brought Predibase to solve this problem. We have a unique solution to control agentic AI to really drive intent-based understanding of action and stopping it. Again, the market is very crowded, a lot of noise, but we believe that we have a unique perspective and solution in this market. Time will tell how this develops and how we grow, but we are excited. In terms of the buyer, again, this is a new market. Somebody under CIO organization will be the buyer. CIO is our ultimate buyer for our data protection business, so we have some convergence with the ultimate buyer.
Some organizations we see chief data officer, chief AI officer interested in this space. Some organizations we see engineering team interested in this space. We’ll figure out how it all develops, but we like what we see so far, and we’ll keep updating you as we make progress in this space.
Multiple Analysts, Analysts, Various (Todd Coupland/CIBC, Junaid Siddiqui/Truist, Keith Bachman/BMO, James Fish/Piper Sandler, Gregg Moskowitz/Mizuho, Shrenik Kothari/Baird): Okay. Many thanks, Bipul.
Brad Zelnick, Analyst, Deutsche Bank0: Thank you. Your next question comes from James Fish of Piper Sandler. Please go ahead.
James Fish, Analyst, Piper Sandler: Hey, guys. Thanks for the question. Bipul, for you, with the increasing agentic workloads and data being created, are you seeing an exponential increase in the amount of data even more so than that sort of traditional workload and how you’re able to kind of compress this down to that enterprises just aren’t overwhelmed with the data? Then just as a follow-up on the go-to-market side, you guys talked that up. Yeah, so how much capacity are you guys looking to add, and how did productivity finish for the year? Thanks, guys.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Thanks, James. Obviously, AI requires data, and there is definitely that data growth associated with AI. Having said that, agentic like deployment in the enterprise is still early, and the main hurdle has been governance and security, and that’s the problem we are solving. I anticipate once the enterprises get fully operational on agents, they will have, again, more usage and production of data. We remain very excited about this market. In terms of, like, how much we are gonna add from this, again, this is early days for Rubrik Agent Cloud. We are still learning and going through our process, just like what we did for identity last year, where we went to work with the customer to understand their problems, understand how tuned our solution was before actually scaling.
that we are going through that learning process right now.
Brad Zelnick, Analyst, Deutsche Bank0: Thank you, James. Your next question comes from Shrenik Kothari from Baird. Please go ahead.
Brad Zelnick, Analyst, Deutsche Bank1: Hey, thanks for taking my question. Bipul, I know you said time will tell, but you guys have been framing these products as S-curve. It already feels, of course, identity recovery has moved from proof point to real growth factor. I know you said it reflects multiple years of work versus Agent Cloud still early. Of course, I wanted to ask you just if you had to characterize where identity sits today versus your original expectations around the S-curve. Then how should we think about the difference overall from an S-curve perspective in terms of timing rather than magnitude and size? Again, I mean, I know it’s still early, but just curious how you are thinking about those.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Shrenik, thank you. If you look at our history, Rubrik is a multi-product platform company. As I said before, the value from the platform increases as our customers adopt more of Rubrik platform. Over the years, we have multiple products that we have scaled to 100 million-plus ARR in a short period of time. As I said, identity was the fastest-growing product for us. In fact, it did exceed our expectation at how fast the product has scaled. Also our engineering team did a tremendous job of building an amazing product and also building amazing set of capabilities. Not just identity recovery, but Identity Resilience, which is both before and during attack, plus also creating an Okta solution, which we are seeing again early high interest from our customer base. We are committed to building a long-term company.
The long-term company can only be built by stacking S-curves. We are always looking over the horizon and thinking what else should we be building? How else we can serve our customers better? How do we become a long-term strategic partner to our customers so that we learn from them, we build for them, we serve them in a way that creates a multi-decade partnership with them.
Brad Zelnick, Analyst, Deutsche Bank: Great. Thanks a lot.
Brad Zelnick, Analyst, Deutsche Bank0: There will be no further questions at this time. I will now turn the call back over to Bipul Sinha. Please continue.
Bipul Sinha, CEO, Chairman, and Co-founder, Rubrik: Thank you so much, everyone, for your time today. As I said on the call, we remain very excited about the opportunities in front of us. Both cyber resilience and AI resilience and AI operations remain strong opportunities in front of us. Our team is dedicated to making sure that our customers go through AI transformation in a low-risk, risk-free manner and really take advantage of the productivity promised by AI. Thank you so much again for your trust. See you in a quarter.
Brad Zelnick, Analyst, Deutsche Bank0: Ladies and gentlemen, that concludes today’s conference call. Thank you for your participation. You may now disconnect.